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SPECIFICATION 



TO ALL WHOM IT MAY CONCERN: 

BE IT KNOWN THAT WE, TOHRU HARADA, a citizen 
of Japan residing at Kanagawa , Japan and HIROYUKI 
KIMBARA, a citizen of Japan residing at Kanagawa, Japan 
have invented certain new and useful improvements in 

FILE CREATION METHOD, SERVER, COMPUTER TERMINAL, 
RECORDING MEDIUM, INFORMATION PROCESSING APPARATUS, 
AND PROGRAM ADDITION SYSTEM 

of which the following is a specification:- 
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BACKGROUND OF THE INVENTION 
1. Field of The Invention 

The present invention generally relates to a file creation 
method, a server, a computer terminal, a recording medium, an 
5 information processing apparatus and a program addition system, 

and more specifically to a file creation method, a server, a computer 
terminal, a recording medium, an information processing apparatus 
and a program addition system, which are configured to add a 
program to a program initiating recording medium. 

10 2. Description of The Related Art 

An information processing apparatus, such as a personal 
computer, carries out various kinds of information processing by 
performing one or more programs corresponding to respective 
information processing procedures. 

15 Moreover, an image forming apparatus (for example, a 

multi-function peripheral system), which is an application example 
of the information processing apparatus, is provided with the display 
unit, the printing unit, the image pickup unit, etc., which are 
accommodated in a single housing, in addition to the four kinds of 

20 programs corresponding to the printer, the copier, the facsimile, and 
the scanner, respectively. By selecting one of the programs, the 
multi-function peripheral system is operated as the selected one of 
the printer, the copier, the facsimile, and the scanner. 

Japanese Laid-Open Patent Application No. 2002- 

25 084383 discloses an example of the multi-function peripheral system 
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mentioned above. 

Upon power-up of the multi-function peripheral system 
or the like, the BIOS (basic input/output system) and the boot loader 
are started. The boot loader expands the operating system (OS) and 
5 the root file system on the RAM (random access memory), and 
initiates the OS. The OS mounts the root file system. The 
"mounting" herein means that a file system, a peripheral device, etc. 
are started so that the file system or peripheral device can be 
accessed by another system or device. 
10 After the startup of the OS, the bootstrap which starts an 

application program (which is called the application) is started. The 
bootstrap is a process which is first started by the information 
processing apparatus or the multi-function peripheral system. 

The bootstrap mounts the file system according to a 
15 predetermined configuration file. The bootstrap starts the program, 
which is required for operation of the information processing 
apparatus or the multi-function peripheral system and recorded in a 
program-initiation recording medium, such as a hard disk drive 
(HDD) or a SD (secure digital) card, according to the predetermined 
20 configuration file. 

In recent years, there is an increasing demand for a 
program addition system that can easily add a new program for use 
in the information processing apparatus or the multi-function 
peripheral system to the program-initiation recording medium 
25 mentioned above. 
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The addition of a new program to the above-mentioned 
program-initiation recording medium may be carried out through the 
network, such as the Internet or a LAN. Moreover, the addition of a 
new program to the program-initiation recording medium may be 
5 carried out by using an SD card which is a detachable recording 
medium the insertion and removal of which is possible. 

The user can make use of the program which is added to 
the program-initiation recording medium, in any information 
processing apparatus or multi-function peripheral system. Hence, 

10 there is a possibility that the program may be illegally added to a 
program-initiation recording medium which is provided in the 
information processing apparatus or the multi-function peripheral 
system which is not authorized to add the program thereto. 

Moreover, when a program is added to a program- 

15 initiation recording medium using a detachable program-addition 

recording medium, such as an SD card, the insertion and removal of 
which is possible, the program recorded in the program-addition 
recording medium can be also used with any information processing 
apparatus or multi-function peripheral system. There is also a 

20 possibility that the program may be illegally added to a program- 
initiation recording medium which is provided in the information 
processing apparatus or the multi-function peripheral system which 
is not authorized to add the program thereto. 

Therefore, when adding the program to the program- 

25 initiation recording medium of the information processing apparatus 
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or the multi-function peripheral system, the provision of a 
mechanism for preventing the program added to the program- 
initiation recording medium from being illegally used is demanded, 
in order to establish the security of the program. 

5 

SUMMARY OF THE INVENTION 

An object of the present invention is to provide an 
improved file creation method in which the above-described 
problems are eliminated. 

10 Another object of the present invention is to provide a 

file creation method which creates a program-addition file on a 
recording medium in response to identification information of a 
program-initiation recording medium, in order to prevent the illegal 
use of a program added to the program-initiation recording medium 

15 and establish the security of the program added thereto. 

Another object of the present invention is to provide a 
server which creates a program-addition file on a recording medium 
in response to identification information of a program-initiation 
recording medium, in order to prevent the illegal use of a program 

20 added to the program-initiation recording medium and establish the 
security of the program added thereto. 

Another object of the present invention is to provide a 
computer terminal which creates a program-addition file on a 
recording medium in response to identification information of a 

25 program-initiation recording medium, in order to prevent the illegal 
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use of a program added to the program-initiation recording medium 
and establish the security of the program added thereto. 

Another object of the present invention is to provide an 
information processing apparatus which creates a program-addition 
5 file on a recording medium in response to identification information 
of a program-initiation recording medium, in order to prevent the 
illegal use of a program added to the program-initiation recording 
medium and establish the security of the program added thereto. 

Another object of the present invention is to provide a 

10 computer-readable recording medium which creates a program- 
addition file on a recording medium in response to identification 
information of a program-initiation recording medium, in order to 
prevent the illegal use of a program added to the program-initiation 
recording medium and establish the security of the program added 

15 thereto. 

Another object of the present invention is to provide a 
program addition system which creates a program-addition file on a 
recording medium in response to identification information of a 
program-initiation recording medium, in order to prevent the illegal 

20 use of a program added to the program-initiation recording medium 
and establish the security of the program added thereto. 

The above-mentioned objects of the present invention 
are achieved by a file creation method which creates a program- 
addition file for adding a program to a program-initiation recording 

25 medium of an information processing apparatus, the method 



comprising the steps of: acquiring identification information of the 
program-initiation recording medium; and creating a program- 
addition file in response to the identification information so that 
starting of the program on the information processing apparatus is 
5 allowed by the program-addition file with the program stored in the 
program-initiation recording medium. 

The above-mentioned objects of the present invention 
are achieved by a server which creates a program-addition file for 
adding a program to a program-initiation recording medium of an 

10 information processing apparatus, the server comprising: an 

identification-information acquisition unit acquiring identification 
information of the program-initiation recording medium; and a file 
creation unit creating a program-addition file in response to the 
identification information, so that starting of the program on the 

15 information processing apparatus is allowed by the program-addition 
file with the program stored in the program-initiation recording 
medium. 

The above-mentioned objects of the present invention 
are achieved by a computer terminal which stores a program- 

20 addition file in a program-addition recording medium, the program- 
addition file being used to add a program to a program-initiation 
recording medium of an information processing apparatus, the 
computer terminal comprising: an information transmitting unit 
transmitting, to a server, information required to acquire 

25 identification information of the program-initiation recording 
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medium; a file receiving unit receiving, from the server, a program- 
addition file which is created by the server in response to the 
identification information so that starting of the program on the 
information processing apparatus is allowed by the program-addition 
5 file with the program stored in the program-initiation recording 
medium; and a file storing unit storing the received program- 
addition file into the program-addition recording medium. 

The above-mentioned objects of the present invention 
are achieved by a computer-readable recording medium storing a 

10 program embodied therein for causing a computer to execute a file 
creation method which creates a program-addition file for adding a 
program to a program-initiation recording medium of an information 
processing apparatus, the file creation method comprising: acquiring 
identification information of the program-initiation recording 

15 medium; and creating a program-addition file in response to the 
identification information so that starting of the program on the 
information processing apparatus is allowed by the program-addition 
file with the program stored in the program-initiation recording 
medium. 

20 The above-mentioned objects of the present invention 

are achieved by an information processing apparatus which adds a 
program to a program-initiation recording medium by using a 
program-addition recording medium in which a program-addition file 
for adding the program to the program-initiation recording medium 

25 is stored, the information processing apparatus comprising: a 
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recording-medium detection unit detecting the program-addition 
recording medium in which the program-addition file is recorded; 
and a program addition unit performing an authentication check of 
the program-addition file read from the program-addition recording 
5 medium, and adding the program to the program-initiation recording 
medium according to a result of the authentication check. 

The above-mentioned objects of the present invention 
are achieved by a program addition system comprising: a server 
which creates a program-addition file for being stored in a program- 

10 addition recording medium; and an information processing apparatus 
which adds a program to a program-initiation recording medium by 
using the program-addition recording medium, wherein the server is 
configured to acquire identification information of the program- 
initiation recording medium, and to create a program-addition file in 

15 response to the identification information, so that starting of the 

program on the information processing apparatus is allowed by the 
program-addition file with the program stored in the program- 
initiation recording medium, wherein the information processing 
apparatus is configured to detect the program-addition recording 

20 medium in which the program-addition file is recorded, to perform 
an authentication check of the program-addition file read from the 
program-addition recording medium, and to add the program to the 
program-initiation recording medium according to a result of the 
authentication check. 

25 The above-mentioned objects of the present invention 
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are achieved by a program addition system comprising: a server 
which creates a program-addition file for being stored in a program- 
addition recording medium; and an information processing apparatus 
which adds a program to a program-initiation recording medium by 
5 using the program-addition recording medium, wherein the server is 
configured to acquire identification information of the program- 
initiation recording medium, and to create a program-addition file in 
response to the identification information, so that starting of the 
program on the information processing apparatus is allowed by the 

10 program-addition file with the program stored in the program- 
initiation recording medium, wherein the information processing 
apparatus is configured to receive the program-addition file from the 
server, to perform an authentication check of the received program- 
addition file, and to add the program to the program-initiation 

15 recording medium according to a result of the authentication check. 

According to the present invention, the program- 
addition file is created in response to the medium identification 
information so that starting of the program on the information 
processing apparatus is allowed by the program-addition file with 

20 the program stored in the program-initiation recording medium. 

Starting of the program on the information processing apparatus is 
not allowed with a program stored in a different program-initiation 
recording medium. Therefore, it is possible to prevent the illegal 
use of a program added to the program-initiation recording medium 

25 and establish the security of the program added thereto. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Other objects, features and advantages of the present 
invention will be apparent from the following detailed description 
5 when reading in conjunction with the accompanying drawings. 

FIG. 1 is a block diagram of an embodiment of the 
information processing apparatus of the invention. 

FIG. 2 is a block diagram of a hardware composition of 
the information processing apparatus of FIG. 1. 
10 FIG. 3 is a block diagram of an embodiment of the 

multi-function peripheral system of the invention. 

FIG. 4 is a block diagram of a hardware composition of 
the multi-function peripheral system of FIG. 3. 

FIG. 5 is a block diagram of an embodiment of a MFP 
15 booting unit in the multi-function peripheral system of FIG. 3. 

FIG. 6 is a diagram for explaining the processing to add 
a program to a program-initiation SD card by using a program- 
addition file. 

FIG. 7 is a diagram for explaining examples of 
20 processing of the multi-function peripheral system, the server, and 
the computer terminal. 

FIG. 8A, FIG. 8B, FIG. 8C and FIG. 8D are diagrams of 
examples of the screen displayed on the display device of the 
computer terminal. 

25 FIG. 9 is a block diagram of an example of the database 
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provided in the server. 

FIG. 10 is a flowchart for explaining an example of the 
processing to create a program-addition file. 

FIG. 11 is a flowchart for explaining an example of 
processing of the authentication check of the requested application 
program. 

FIG. 12 is a flowchart for explaining an example of 
processing of the authentication check of the configuration file. 

FIG. 13 is a diagram of an example of the program- 
addition location selection screen. 

FIG. 14 is a diagram of an example of the program- 
initiation SD card to which the program is added. 

FIG. 15A and FIG. 15B are block diagrams for 
explaining an example of processing to add a program from the 
program-addition SD card to the program-initiation SD card. 

FIG. 16 is a diagram for explaining other examples of 
the processing of the multi-function peripheral system, the server, 
and the computer terminal. 

FIG. 17 is a diagram of an example of the program- 
addition file recorded in the program-addition SD card. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

A description will now be given of the preferred 
embodiments of the invention with reference to the accompanying 
drawings. 



- 13 - 



FIG. 1 is a block diagram of an embodiment of the 
information processing apparatus of the present invention. 

The information processing apparatus 1 is constituted so 
that the software group 2, the boot unit 3, and the hardware 
5 resources 4 may be included. 

The boot unit 3 is first activated upon power-up of the 
information processing apparatus 1, and starts the program initiating 
unit which is described later. 

The program initiating unit starts the software group 2 
10 of the information processing apparatus 1. 

Moreover, the program initiating unit reads the 
programs of the SD card control unit 11, the program addition unit 
12, the applications 14-1 to 14-n from the auxiliary memory device 
or the SD card, etc., and transmits each program to the memory 
15 device so that it starts the program. Hereinafter, the applications 
mean the application programs which are executed on the OS 
(operating system), and such programs or the application programs 
may also be called the applications. 

The hardware resources 4 comprise the hardware 
20 resources, including the input device, the display device, the 

auxiliary memory device, the memory device, the interface device, 
and the SD-card slot. 

Moreover, the software group 2 includes the programs of 
the SD card control unit 11, the program addition unit 12, and the 
25 applications 14-1 to 14-n, which are started on the OS, such as 
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UNIX (registered trademark). 

The OS carries out parallel execution of the programs 
(or the applications) of the SD card control unit 11, the program 
addition unit 12 and the applications 14-1 to 14-n, as the processes 
on the OS. 

The API (application program interface) 15 is used for 
the pre-defined function to receive the request from the applications 
14-1 to 14-n. The engine I/F 16 is used for the pre-defined function 
to transmit the request to the hardware resources 4. 

In addition, the SD card control unit 11, the program 
addition unit 12, and the program initiating unit will be described 
later. 

Next, a description will be given of a hardware 
composition of the information processing apparatus 1 of FIG. 1. 

FIG. 2 shows a hardware composition of the information 
processing apparatus 1 of the present invention. 

The information processing apparatus 1 of FIG. 2 is 
constituted so that the input device 21, the display device 22, the 
auxiliary memory device 23, the memory device 24, the arithmetic 
processing device 25, the interface device 26, and the SD card slot 
27, which are interconnected by the bus B, may be included. 

The input device 21 includes the keyboard, the mouse, 
etc., and it is used by the operator to input various operational 
instructions. The display device 22 displays various operational 
data and windows which are required for the operations. 
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The interface device 26 provides the interfaces for 
connecting the information processing apparatus 1 to the network or 
the computer terminal, and includes the modem, the router, or the 
devices according to various interface specifications. 
5 The insertion and removal of the SD card is possible 

with respect to the SD card slot 27. An interrupt signal, which is 
generated in response to the insertion or removal of the SD card, is 
transmitted to the SD card control unit from the SD card slot 27. 

The auxiliary memory device 23 stores various files, 
10 data, etc. The SD card inserted in the SD card slot 27 and the 
auxiliary memory device 23 store the programs of the SD card 
control unit 11, the program addition unit 12, the applications 14-1 
to 14-n, which are related to the processing of the information 
processing apparatus 1, and store various files, data, etc. required 
15 for the program processing. 

The memory device 24 stores the programs, which are 
read from the SD card control unit 11, the program addition unit 12, 
and the applications 14-1 to 14-n, from the SD card inserted in the 
SD card slot 27, and the auxiliary memory device 23, etc. at the time 
20 of starting of the information processing apparatus 1. 

The arithmetic processing unit 25 performs arithmetic 
processing according to the programs of the SD card control unit 11, 
the program addition unit 12 and the applications 14-1 to 14-n, 
which are stored in the memory device 24. 
25 Next, a description will be given of the composition of 
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the multi-function-peripheral system 31 as an application example of 

the information processing apparatus 1 of the invention. 

The following description will be focused on the 

composition of the multi-function peripheral system 31. However, 
5 the same is applicable to the composition of the information 

processing apparatus 1 of the invention. 

The image forming apparatus in the present embodiment 

is provided with the respective functions of image forming modules, 

such as the printer, the copier, the facsimile, and the scanner, which 
10 are contained in one housing of the apparatus, and the image 

forming apparatus will be called the multi-function peripheral 

system (MFP). 

The multi-function peripheral system (MFP) includes 

the display unit, the printing unit, the image reading unit, etc. in a 
15 single housing, and is provided with the four kinds of software 

(application programs) corresponding to the printer, the copier, the 

facsimile, and the scanner, respectively. By selecting one of these 

applications, and the MFP is operated as the selected one of the 

printer, the copier, the facsimile, and the scanner. 
20 FIG. 3 is a block diagram of an embodiment of the 

multi-function peripheral system of the invention. 

As shown in FIG. 3, the multi-function peripheral 

system (MFP) 31 is constituted so that the software group 32, the 

MFP boot unit 33, and the hardware resources 34 are included. 
25 The MFP boot unit 33 is activated upon power-up of the 
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multi-function peripheral system 31, and starts execution of the 
application layer 35 and the platform 36 in the software group 32. 

For example, the MFP boot unit 33 reads the programs 
of the application layer 35 and the platform 36 from the hard disk 
5 drive (HDD) etc., transfers each read program to the memory storage, 
and starts the execution thereof. 

The hardware resources 34 include the monochrome 
laser beam printer (B&W LP) 41, the color laser printer (Color LP) 
42, and other hardware resources 43, such as the scanner and the 
10 facsimile. 

The software group 32 includes the application layer 35 
and the platform 36 which are operated on the operating system (OS), 
such as UNIX (registered trademark). 

The application layer 35 includes the programs which 

15 perform processing specific to the respective user services related to 
the image formation, such as the printer, the copier, the facsimile, 
and the scanner. Specifically, the application layer 35 includes the 
printer application 51, the copier application 52, the fax application 
53, the scanner application 54, and the network file application 55. 

20 The platform 36 includes the control service layer 37, 

the system resource manager (SRM) 69, and the handler layer 38. 
The control service layer 37 interprets the processing request from 
the application layer 35, and generates the acquisition request to the 
hardware resources 34. The SRM 69 manages one or more hardware 

25 resources 34, and arbitrates the acquisition request from the control 
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service layer 37. The handler layer 38 manages the hardware 
resources 34 according to the acquisition request from SRM 69. 

The control service layer 37 is constituted to include 
one or more service modules therein. Specifically, the control 
5 service layer 37 includes the network control service (NCS) 61, the 
delivery control service (DCS) 62, the operation panel control 
service (OCS) 63, the facsimile control service (FCS) 64, the engine 
control service (ECS) 65, the memory control service (MCS) 66, the 
user information control service (UCS) 67, and the system control 

10 service (SCS) 68. 

In addition, the platform 36 is constituted with the pre- 
defined functions so that the application program interface (API) 81 
which receives a processing request from the application layer 35 is 
included. The operating system (OS) carries out parallel execution 

15 of the applications of the application layer 35 and the platform 36 as 
processes thereon. 

The process of NCS 61 acts as the agent that distributes 
the data received from the network through the corresponding 
protocol over the applications, and transmits the data from the 

20 applications to the network through the corresponding protocol. For 
example, the process of NCS 61 controls data communications of 
HTTP (hypertext transfer protocol) between the MFP and the clients 
connected via the network, by using HTTPD (hypertext transfer 
protocol daemon). 

25 The process of DCS 62 controls delivery of the 
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accumulated documents etc. The process of OCS 63 controls 
operation of the operation panel. The process of FCS 64 provides 
the application program interface for performing the facsimile 
transmission and reception using the PSTN or ISDN network from 
5 the application layer 35, the registration/retrieval of various 

facsimile data managed with the backup memory, the facsimile 
reading, the facsimile reception and printing, etc. 

The process of ECS 65 controls the engine units, such as 
the monochrome laser beam printer 41, the color laser printer 42, 

10 and the other hardware resources 43. The process of MCS 66 

performs memory control of the memory acquisition and releasing, 
the use of HDD, the compression and expansion of image data, etc. 
The process of UCS 67 manages user information. The process of 
SCS 68 controls the application management, the operation panel 

15 control, the system monitor displaying, the LED monitor displaying, 
the hardware-resources management, the interrupted application 
control, etc. 

The process of SRM 69 carries out the system control 
and the management of the hardware resources 34 associated with 
20 SCS 68. For example, the process of SRM 69 arbitrates the 
acquisition requests from the upper layer to use the hardware 
resources 34, such as the monochrome laser beam printer 31 and the 
color laser printer 32, and controls the execution thereof. 

Specifically, the process of SRM 69 determines whether 
25 the hardware resources 34 can be used according to the acquisition 
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request (or whether they are currently used according to another 
acquisition request). If the use of the hardware resources 34 is 
possible, the process of SRM 69 notifies the upper layer that the 
hardware resources 34 can be used according to the acquisition 
request. 

Moreover, the process of SRM 69 performs scheduling 
of the use of the hardware resources 34 according to the acquisition 
request from the upper layer, and carries out the contents of the 
request (for example, the paper conveyance and the imaging 
operation by means of the printer engine, the memory reservation, 
the file generation, etc.) directly. 

Moreover, the handler layer 38 includes the facsimile 
control unit handler (FCUH) 70 which manages the facsimile control 
unit (FCU), and the image memory handler (IMH) 71 which carries 
out the memory assignment of the process and the management of 
the memory assigned to the process. 

SRM 69, FCUH 70, and IMH 71 perform the processing 
request to the hardware resources 34 by using the engine interface 
82 which transmits the processing request to the hardware resources 
34 with the pre-defined functions. 

With the above-described composition of FIG. 3, the 
multi-function peripheral system 31 can carry out the intensive 
control of each processing commonly required by the respective 
applications on the platform 36. 

Next, a description will be given of the hardware 
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configuration of the multi-function peripheral system 31 of the 
invention. FIG. 4 shows the hardware configuration of the multi- 
function peripheral system 31 of FIG. 3. 

As shown in FIG. 4, the multi-function peripheral 
5 system 31 includes the controller 100, the operation panel 120, the 
facsimile control unit (FCU) 121, and the engine unit 122. 

The controller 100 includes the CPU 101, the system 
memory 102, the north bridge (NB) 103, the south bridge (SB) 104, 
the application-specific integrated circuit (ASIC) 106, the local 

10 memory (LM) 107, the hard disk drive (HDD) 108, the network 

interface controller (NIC) 109, the SD card slot 110, the USB device 
111, the IEEE1394 device 112, and the Centronics interface 113. 

CPU 101 performs the control of the whole multi- 
function peripheral system 31. CPU 101 starts execution of NCS 61, 

15 DCS 62, OCS 63, FCS 64, ECS 65, MCS 66, UCS 67, SCS 68, SRM 
69, FCUH 70, and IMH 71, and performs each process of the 
programs on the OS. Moreover, CPU 101 starts execution of the 
printer application 51, the copier application 52, the facsimile 
application 53, the scanner application 54, and the network file 

20 application, which constitute the application layer 35, and performs 
each process of the programs on the OS. 

NB 103 is the bridge which is provided for 
interconnection of CPU 101, the system memory 102, SB 104, and 
ASIC 106. The system memory 102 is the memory which is used for 

25 image drawing of the multi-function peripheral system 31. SB 104 
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is the bridge which is provided for interconnection of NB 103, ROM 
(not shown), the PCI bus 114, and the peripheral devices. 

The local memory 107 is the memory which is used as 
the image buffer for copying documents or the buffer for encoding 
images. ASIC 106 is the application-specific integrated circuit for 
image processing uses including the hardware for image processing. 
HDD 108 is the storage device for accumulating images, document 
data, programs, font data, forms, etc. The operation panel 120 is 
provided to display the operational messages to the operator and 
receive the input operational commands from the operator. 

NIC 109 is the interface device for connecting the MFP 
31 to the network. The SD card slot 110 is provided to allow the 
insertion and removable of the SD card, and the SC card slot 110 
transmits an interrupt signal, generated in response to the insertion 
and removable of the SD card, to the SD card control unit. The USB 
device 111, the IEEE1394 device 112 and the Centronics interface 
113 are the interface devices according to the respective interface 
specifications. 

FIG. 5 is a block diagram of an example of the multi- 
function-peripheral system (MFP) booting unit of FIG. 3. 

The multi-function-peripheral system (MFP) booting 
unit 33 comprises the ROM monitor 130 and the program initiating 
unit 131. As described above, the MFP booting unit 33 is first 
activated upon power-up of the multi-function peripheral system 31, 
and starts execution of the application layer 35 and the platform 36 
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in the software group 32. 

The ROM monitor 130 which is the BIOS and boot 
loader is activated upon power-up of the MFP 31, and performs the 
initialization of the hardware, the diagnosis of the controller 100, 
the initialization of the software, etc. 

The ROM monitor 130 expands the OS and the root file 
system on the system memory 102, and starts execution of the OS. 
The OS mounts the root file system. 

Moreover, the program initiating unit 131 is called from 
the OS, and secures the memory areas on the system memory 102 
and the LM 107. 

The program initiating unit 131 is the process which is 
first initiated by the multi-function peripheral system 1, and mounts 
the file system according to a predetermined configuration file. 
Specifically, according to the predetermined configuration file, the 
program initiating unit 131 reads the programs of the application 
layer 35 and the platform 36, required for operation of the MFP 31, 
from the HDD 108, the SD card, the ROM, etc., and expands each 
read program to the memory areas which are secured on the system 
memory 102 and the LM 107, so that and the program initiating unit 
131 starts the processes of the application layer 35 and the platform 
36. 

Next, a description will be given of processing of the 
program initiating unit 131. 

The program initiating unit 131 reads a predetermined 
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master configuration file at the time of starting, and performs 
mounting of the file system and starting of the processes according 
to the read master configuration file. 

Moreover, the program initiating unit 131 performs 
5 mounting processing according to the description of the mounting, 
when the description of the mounting is included in the read master 
configuration file. 

Furthermore, when the predetermined directory which 
includes the file of a predetermined extension in the root director of 

10 the file system mounted when the predetermined configuration file 
existed in the root of the mounted file system exists, the program 
initiating unit 131 reads the predetermined configuration file or the 
file of the predetermined extension, and performs mounting 
processing of the file system. 

15 In addition, "gzromfs" is an example of the file system 

which can be mounted by the program initiating unit 131. This file 
system "gzromfs" manages the files of the ROMFS format which are 
"gzip" compression encoded. 

Next, a description will be given of the preferred 

20 embodiments of the invention in which the processing to add a 
program to a program-initiation SD card (which is a program- 
initiation recording medium) is carried out. 

The first preferred embodiment of the present invention 
will be explained. FIG. 6 is a diagram for explaining an 

25 embodiment of the processing to add a program to a program- 
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initiation SD card by using a program-addition file. 

In the following, only the composition required for 
description among the composition of the multi-function peripheral 
system 31 is shown in the diagram of FIG. 6, and the composition 
which is not required for description is omitted. 

The multi-function peripheral system 31 is provided 
with the SD card slot 110 in which the program-initiation SD card 
141 is inserted. The multi-function peripheral system 31 is 
connected to the computer terminal 160 through the network 210. 
Moreover, the multi-function peripheral system 31 is connected to 
the server 150 through the network 200. The multi-function 
peripheral system 31 carries out the processing to add the program 
to the program-initiation SD card 141 or the flash ROM 142 by using 
the program-addition file. 

The server 150 is the device which creates the program- 
addition file used for adding the program to the program-initiation 
SD card 141. The server 150 creates the program-addition file based 
on the acquired information. The server 150 transmits the created 
program-addition file to the MFP 31 via the network 200, or to the 
computer terminal 160 via the network 210. 

The computer terminal 160 is connected to the server 
150 via the network 200. Moreover, the computer terminal 160 is 
connected to the multi-function peripheral system 31 via the network 
210. The computer terminal 160 transmits information to the server 
150 via the network 200, and transmits the program-addition file, 
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received from the server 150, to the multi-function peripheral system 
31 via the network 210. 

Referring to FIG. 7, a description will be given of the 
processing of the multi-function peripheral system 31, the server 150, 
5 and the computer terminal 160, which are shown in FIG. 6. 

FIG. 7 is a diagram for explaining examples of the 
processing of the multi-function peripheral system, the server, and 
the computer terminal. The examples of the processing of FIG. 7 are 
directed to the transmission of the program-addition file from the 
10 server 150 to the MFP 31 through the computer terminal 160. 

In the processing of FIG. 7 (a), the information of the 
application program, which is desired by the operator who operates 
the computer terminal 160 to be added to the multi-function 
peripheral system 31, is sent to the server 150 as the name of the 
15 requesting application program. 

The operator can transmit the information of the 
application to be added to the multi-function peripheral system 31, 
to the server 150 by using the screen shown in FIG. 8A to FIG. 8D 
displayed on the display device of the computer terminal 160. 
20 FIG. 8A to FIG. 8D show examples of the screen 

displayed on the display device of the computer terminal 160. 

The operator on the computer terminal 160 who desires 
to add the requesting application program to the multi-function 
peripheral system 31 starts the pre-installed application program in 
25 the computer terminal 460, and displays the application starting 
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screen of FIG. 8A to FIG. 8C on the display device of the computer 
terminal 160. 

In the screen of FIG. 8A, the user ID input item, the 
password input item, and the application selection column are 
included. 

In the screen of FIG. 8B, the model name input item, the 
device purchase date input item, and the application selection 
column are included. 

In the screen of FIG. 8C, the model ID input item and 
the application selection column are included. 

If the operator operates the computer terminal 160 and 
inputs the information to any one screen of FIG. 8A to FIG. 8C, the 
input information will be transmitted to the server 150 from the 
computer terminal 160. 

However, in the case of the screen of FIG. 8A, the 
identification information (for example, the model name, the model 
ID, etc.) for identifying the multi-function peripheral system 31 is 
not transmitted to the server 150. 

Therefore, when there are two or more model IDs 
corresponding to the requesting application program, the computer 
terminal 160 displays the screen of FIG. 8D on the display device, 
so that the operator is requested to choose the desired model ID from 
among them. 

Alternatively, the server 150 may display the screens of 
FIG. 8A to FIG. 8D on the display device of the server, which are 
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displayed on the display device of the computer terminal 160 as in 
the above-described embodiment. 

Referring back to FIG. 7 (a), the server 150 performs 
the user authentication based on both the information stored in the 
5 database 170 of FIG. 9 and the information received from the 

computer terminal 160. When the user authentication is completed 
normally, the program-addition file used for adding the program to 
the program-initiation SD card 141 is created. 

FIG. 9 is a block diagram of an example of the database 
10 170 provided in the server 150. 

As shown in FIG. 9, the information stored in the 
database 170 includes the user ID, the MFP-system list, the model 
ID related with the multi-function peripheral system contained in the 
MFP-system list, the model name, the loaded application list, the 
15 purchase date, the serial ID (the SD serial ID) of the program- 
initiation SD card 141 installed in the MFP system, the application 
name related with the application program contained in the 
application list, and the purchase date of the application program. 

In addition, the database 170 may store the newest 
20 information because it is cooperated with the system which receives 
the update information from one or more multi-function peripheral 
systems 31 at respective intervals of a predetermined time. 

The server 150 receives, from the database 170, the SD 
serial ID of the program-initiation SD card 141 of the multi-function 
25 peripheral system 31 of concern. 
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Therefore, the acquisition of the SD serial ID can be 
easily carried out by the server 150 if each SD serial ID of one or 
more multi-function peripheral systems 31 is stored in the database 
170. 

The server 150 creates a program-addition file, which is 
required to add the program to the program-initiation SD card 141, 
as shown in FIG. 10. 

FIG. 10 is a flowchart for explaining an example of the 
processing to create the program-addition file. 

As shown in FIG. 10, the server 150 at step S10 selects 
the application program, the electronic signature of the application 
program, and the configuration file based on the model ID and the 
requested application name which the server 150 received from the 
computer terminal 160. 

Progressing to step Sll, the server 150 creates the MD 
(message digest) of the configuration file chosen at step S10 and the 
SD serial ID acquired from the database 170. 

Progressing to step S12, the server 150 enciphers the 
MD created at step Sll with the private key, and creates the 
electronic signature of the configuration file. 

Progressing to step S13, the server 150 creates the 
program-addition file based on the application program, the 
electronic signature of the application program, and the 
configuration file, which are chosen at step S10, and based on the 
electronic signature of the configuration file created at step S12. 
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Referring to FIG. 7 (b), the server 150 transmits the 
program-addition file to the computer terminal 160, the program- 
addition file including the application program, the electronic 
signature of the application program, the configuration file, and the 
5 electronic signature of the configuration file. 

In the processing of FIG. 7 (c), the computer terminal 
160 transmits the program-addition file, received from the server 
150, to the NCS 61 of the multi-function peripheral system 31. 

In the processing of FIG. 7 (d), the NCS 61 transmits 
10 the program-addition file to the program initiating unit 131 through 
the SCS 68. 

The program initiating unit 131 performs the electronic 
authentication check of the requesting application program and the 
configuration file using the authentication check library 134, in 
15 order to check the justification of the received program-addition file. 
For example, the authentication check of the application program is 
performed as in the flowchart of FIG. 11. 

FIG. 11 is a flowchart from explaining an example of 
the processing of the authentication check of the requesting 
20 application program. 

At step S20, the program initiating unit 131 acquires the 

model ID. 

Progressing to step S21, the program initiating unit 131 
creates the MD1 (message digest) based on the model ID acquired at 
25 step S20 and the application program included in the program- 
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addition file. 

Progressing to step S22, the program initiating unit 131 
creates the MD2 (message digest) by deciphering the electronic 
signature of the application, contained in the program-addition file, 
5 with the public key. 

Progressing to step S23, the program initiating unit 131 
determines whether the MD1 and the MD2 are equal to each other. 

If it is determined at step S23 that the MD1 and the 
MD2 are equal, the program initiating unit 131 at step S24 
10 determines that the authentication check of the requesting 
application program is set to OK. 

If it is determined at step S23 that the MD1 and the 
MD2 are not equal, the program initiating unit 131 at step S25 
determines that the authentication check of the requesting 
15 application program is set to NG. This is because, if the MD1 and 

the MD2 are not equal, the possibility that the requesting application 
program included in the program-addition file is altered is 
considered high. 

Moreover, the authentication check of the configuration 
20 file is performed by the program initiating unit 131 as in the 
flowchart of FIG. 12. 

FIG. 12 shows an example of the processing of the 
authentication check of the configuration file. 

At step S30, the program initiating unit 131 acquires the 
25 application SD serial ID from the program-initiation SD card 141. 
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Progressing to step S31, the program initiating unit 131 
creates the MD1 based on the SD serial ID obtained at step S30 and 
the configuration file contained in the program-addition file. 

Progressing step S32, the program initiating unit 131 
creates the MD2 by deciphering the electronic signature of the 
configuration file, contained in the program-addition file, with the 
public key. 

Progressing step S33, the program initiating unit 131 
determines whether the MD1 and the MD2 are equal to each other. 

If it is determined at step S33 that the MD1 and the 
MD2 are equal, the program initiating unit 131 at step S34 
determines that the authentication check of the configuration file is 
set to OK. 

If it is determined at step S33 that the MD1 and the 
MD2 are not equal, the program initiating unit 131 at step S35 that 
the authentication check of the configuration file is set to NG. This 
is because, if the MD1 and the MD2 are not equal, the possibility 
that the requesting application program included in the program- 
addition file is altered is considered high. 

After the program initiating unit 131 checks the 
justification of the program-addition file, the control of the program 
initiating unit 131 is transferred to the processing of FIG. 7 (e). 

In the processing of FIG. 7 (e), the program initiating 
unit 131 notifies the SCS 68 that the preparation to add the program 
is completed. 
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The SCS 68 writes a part or all of the program-addition 
file to the program-initiation SD card 141 or the flash ROM 142. In 
the present embodiment, according to the description of the 
configuration file, the SCS 68 is requested to write the program- 
5 addition file to either of the program-initiation SD card 141 or the 
flash ROM 142. Alternatively, the present embodiment may be 
modified so that the addition location selection screen as shown in 
FIG. 13 is displayed on the control panel 120, and the operator is 
requested to choose desired one from among the addition locations. 

10 The addition location selection screen of FIG. 13 

contains the character string in which the selection of the addition 
location is requested, and the selection button for choosing the 
desired addition location. 

When the program-initiation SD card 141 is chosen by 

15 the operator as the addition location, the SCS 68 is caused to write 
the requesting application program, the electronic signature of the 
application program, the configuration file, and the electronic 
signature of the configuration file to the program-initiation SD card 
141. 

20 FIG. 14 shows an example of the program-initiation SD 

card in which the program is added. 

In the example of FIG. 14, "apl.cnf" under the directory 
"init.d" indicates the configuration file, and "apl.lic" indicates the 
electronic signature file which is used for the authentication check 

25 of the configuration file. Moreover, "apl.mod" under the directory 
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"module" indicates the requesting application program, and 
"apl.mac" indicates the electronic signature of the application 
program. 

On the other hand, when the flash ROM 142 is chosen 
5 by the operator as the addition location, the SCS 68 is caused to 

write the requesting application program and the configuration file 
to the flash ROM 142. In starting of the program from the flash 
ROM 142, the electronic signature check is not performed. Hence, 
the writing of the electronic signature of the application program 

10 and the electronic signature of the configuration file to the flash 
ROM 142 is omitted in this case. 

In the above examples of the processing of FIG. 7, the 
program-addition file is transmitted from the server 150 to the MFP 
31 through the computer terminal 160. Alternatively, the program- 

15 addition file may be transmitted from the server 150 directly to the 
MFP 31 without using the computer terminal 160. 

In such alternative embodiment, the processing of FIG. 
7 (a) is carried out so that the operator who operates the MFP 31 or 
the server 150 inputs or transmits the information of the desired 

20 application program to be added to the MFP 31, to the server 150 as 
the name of the requesting application program. The operator can 
input or transmit the information of the application program to be 
added to the MFP 31, to the server 150 by using the screen shown in 
FIG. 8A to FIG. 8D displayed on the display device of the server 

25 150 or the operation panel 120 of the MFP 31. 
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Moreover, in such alternative embodiment, the 
processing of FIG. 7 (b) or FIG. 7 (c) is carried out so that the 
server 150 transmits the program-addition file to the NCS 61 of the 
MFP 31 via the network 200, and the program-addition file including 
at least the application program, the electronic signature of the 
application program, the configuration file, and the electronic 
signature of the configuration file. 

In any case, according to the processing of FIG. 7, the 
requesting application program, the electronic signature of the 
application program, the configuration file, and the electronic 
signature of the configuration file are downloaded via the network, 
and the program-initiation SD card 141 of FIG. 14 can be created 
easily. 

In the case in which the program is started using the 
program-initiation SD card 141 of FIG. 14, the authentication checks 
of the application program and the configuration file are performed 
according to the processings of FIG. 11 and FIG. 12, and only the 
program whose justification has been confirmed, among those 
currently recorded in the program-initiation SD card 141, can be 
started safely. 

A description will be given of the second preferred 
embodiment of the present invention. 

FIG. 15A and FIG. 15B show an example of the 
processing to add the application program of the program-addition 
SD card to the program-initiation SD card. 
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In the composition of FIG. 15A and FIG. 15B, only the 
elements of the multi-function peripheral system 31 required for 
description are illustrated, and the elements which do not need 
description are omitted. 
5 As shown in FIG. 15B, the multi-function peripheral 

system 31 is provided with the program-addition SD card 140 
inserted in the SD card slot 110. The multi-function peripheral 
system 31 is an information processing apparatus which adds the 
program to the program-initiation SD card 141 or the flash ROM 142 
10 by using the program-addition SD card 140. 

As shown in FIG. 15A, the server 150 is a device which 
creates the program-addition file for adding the program to the 
program-initiation SD card 141. The computer terminal 160 is 
connected to the server 150 through the network 200, such as the 
15 Internet or LAN. 

The computer terminal 160 is provided with the SD card 
slot. The computer terminal 160 reads the information from the 
program-addition SD card 140 inserted in the SD card slot, and 
transmits the read information to the server 150 via the network 200. 
20 On the other hand, the computer terminal 160 receives the 

information from the server 150 via the network 200, and writes the 
received information to the program-addition SD card 140 inserted 
in the SD card slot. 

Referring to FIG. 16, a description will be given of the 
25 processing of the multi-function peripheral system 31, the server 150, 
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and the computer terminal 160 of FIG. 15A and FIG. 15B. 

FIG. 16 shows another example of the processing of the 
multi-function peripheral system, the server, and the computer 
terminal. 

5 In the processing of FIG. 16 (a), the operator who 

operates the computer terminal 160 transmits to the server 150 the 
information of the desired application program to be added to the 
multi-function peripheral system 31, as the name of the requesting 
application program. 
10 The operator looks at one of the screens of FIG. 8A to 

FIG. 8C displayed on the display device of the computer terminal 
160, and can transmit the information of the desired application 
program to be added to the multi-function peripheral system 31, to 
the server 150. 

15 For example, the operator who desires to add the 

application program to the multi-function peripheral system 31 starts 
the dedicated application program pre-recorded in the computer 
terminal 160, so that any one of the screens of FIG. 8A to FIG. 8C is 
displayed on the display device of the computer terminal 160. 

20 The computer terminal 160 automatically starts the 

dedicated application program when the program-addition SD card 
140 is inserted in the SD card slot of the computer terminal 160, and 
any one screen of FIG. 8A to FIG. 8C is displayed. 

If the operator operates the computer terminal 160 and 

25 inputs the information into any one of the screens of FIG. 8A to FIG. 
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8C, the input information will be transmitted to the server 150 from 

the computer terminal 160. 

In the case of the screen of FIG. 8A, the identification 

information (for example, the model name, the model ID, etc.) for 
5 identifying the multi-function peripheral system 31 is not 

transmitted to the server 150. Therefore, when there are two or 

more model IDs corresponding to the requesting application program, 

the computer terminal 160 displays the screen of FIG. 8D on the 

display unit, so that the operator is requested to choose the desired 
10 model ID from among them. Alternatively, the server 150 may 

display one of the screens of FIG. 8A to FIG. 8D on the display 

device of the computer terminal 160. 

The server 150 performs the user authentication based 

on both the information stored in the database 170 of FIG. 9 and the 
15 information received from the computer terminal 160. When the 

user authentication is completed normally, the program-addition file 

for adding the program to the program-initiation SD card 141 is 

created by the server 150. 

The server 150 receives from the database 170 the SD 
20 serial ID of the program-initiation SD card of the multi-function 

peripheral system 31, and creates the program-addition file required 

for adding the program to the program-initiation SD card 141 as in 

the flowchart of FIG. 10. 

In the processing of FIG. 16 (b), the server 150 
25 transmits the program-addition file to the computer terminal 160, 
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and the program-addition file including at least the requesting 
application program, the electronic signature of the application 
program, the configuration file, and the electronic signature of the 
configuration file. 

5 In the processing of FIG. 16 (c), the computer terminal 

160 receives from the server 150 the program-addition file, and 
writes the received program-addition file to the program-addition SD 
card 140 inserted in the SD card slot, as shown in FIG. 17. 

FIG. 17 shows an example of the program-addition SD 

10 card in which the program-addition file is recorded. In the example 
of the program-addition SD card 140 in FIG. 17, "apl.cnf" indicates 
the configuration file, "apl.lic" indicates the electronic signature of 
the configuration file, "apl.mod" indicates the requesting application 
program, and "apl.mac" indicates the electronic signature of the 

15 application program. 

In the processing of FIG. 16 (d), the program-addition 
SD card 140 as shown in FIG. 11 is inserted in the SD card slot 110 
of the multi-function peripheral system 31. The SD card control unit 
133 detects the insertion of the program-addition SD card 140 in the 

20 SD card slot 110, and notifies the detected insertion of the SD card 
to the program initiating unit 131. 

In the processing of FIG. 16 (e), the program initiating 
unit 131 reads the program-addition file from the program-addition 
SD card 140, and performs the authentication checks of the 

25 requesting application program and the configuration file using the 
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electronic authentication check library 134, in order to check the 
justification of the program-addition file. 

For example, the authentication check of the requesting 
application program is performed as in the flowchart of FIG. 12. 
Moreover, the authentication check of the configuration file is 
performed by the program initiating unit 131 as in the flowchart of 
FIG. 13. 

If the program initiating unit 131 checks the 
justification of the program-addition file read from the program- 
addition SD card 140, the program initiating unit 131 progresses to 
the processing of FIG. 16 (f). In the processing of FIG. 16 (f), the 
program initiating unit 131 mounts the program-addition SD card 
140. 

In the processing of FIG. 16 (g), the program initiating 
unit 131 notifies to the SD card control unit 133 that the mounting 
of the program-addition SD card 140 is completed. 

In the processing of FIG. 16 (h), the SD card control 
unit 133 notifies to the SCS 68 that the preparation to add the 
program of the program-addition SD card 140 to the program- 
initiation SD card is completed. 

In the processing of FIG. 16 (i), the SCS 68 writes a 
part or all of the program-addition file read from the program- 
addition SD card 140, to the program-initiation SD card 141 or the 
flash ROM 142. 

In addition, the SCS 68 determines the addition location 
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of the program-addition file (either the program-initiation SD card 
141 or the flash ROM 142) based on the description of the 
configuration file. Alternatively, the addition location selection 
screen as shown in FIG. 14 may be displayed on the control panel 
120, and the operator may be requested to choose one from among 
them. 

When the program-initiation SD card 141 is chosen as 
the addition location, the SCS 68 writes the requesting application 
program, the electronic signature of the application program, the 
configuration file, and the electronic signature of the configuration 
file to the program-initiation SD card 141, as shown in FIG. 15. 

On the other hand, when the flash ROM 142 is chosen as 
the addition location, the SCS 68 writes the requesting application 
program and the configuration file to the program-initiation SD card 
141. 

According to the processing of FIG. 16, the requesting 
application program, the electronic signature of the application 
program, the configuration file, and the electronic signature of the 
configuration file are acquired not only through the network but also 
through the application SD card, and the program-initiation SD card 
141 of FIG. 14 can be created easily. 

When the program of the program-initiation SD card 141 
of FIG. 14 is started, the processings of the flowcharts of FIG. 11 
and FIG. 12 are performed so that the authentication checks of the 
application program and the configuration file are performed, and 
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the application program is initiated after the authentication checks 
are performed. Only the program whose justification has been 
checked, among the programs currently recorded in the program- 
initiation SD card 141 can be started safely. 
5 In the above-described embodiments, the description is 

focused on the processing of the multi-function peripheral system 31, 
and the same is easily applicable to the information processing 
apparatus 1 shown in FIG. 1 and FIG. 2. 

The present invention is not limited to the above- 

10 described embodiments, and variations and modifications may be 
made without departing from the scope of the present invention. 

Further, the present application is based on Japanese 
priority application No. 2003-076605, filed on March 19, 2003, and 
Japanese priority application No. 2004-057680, filed on March 2, 

15 2004, the entire contents of which are hereby incorporated by 
reference. 
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